6 ms·

sure, and if if the algorithm was publicly documented and focused on plishing (site structure, visual similarities), I'd be far less concerned about future mani

• davnicwil 7y ago
  It's not that I disagree with either you or the sibling comment, it has some potential for abuse, I just don't see it as likely - I mean what manipulation could happen here? If they starting suggesting I meant 'facebook.com' when I go to 'twitter.com' then I'm going to immediately stop using the product and I think most people would too. I just don't see how many near-miss cases there could be where this could be genuinely abused. It's just an attempt to help people who will and do get fooled by similar-looking domain names in phishing attacks. This is an example of that. Obviously in this case it's not a typo attack - as you rightly point out the keys are typically too far apart - it's a potential phishing attack of the variety 'here click this link to re-enter your credit card details for your recent Ikea order, as our system lost them' hoping the user doesn't really look properly at the url bar and gets fooled.